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Claims 



1 . (Currently Amended) A computer program product embodied on a first 
computer-readable medium and comprising code that, when executed, causes a computer to 
perform a method of generating a partial procedure summary of a procedure of multithreaded 
software, wherein the procedure performs a plurality of actions when executed, the method 
comprising: 

performing a reachability analysis of at least a portion of the multithreaded software; 
when the procedure is reached during the reachability analysis, 

_Q identifying a plurality of the actions as atomically modelable with respect to 
multithreaded execution of the procedure as atomically modelable actions ; and 

2} generating the partial procedure summary of the procedure from the plurality of 
the actions atomically modelable actions with respect to multithreaded e x e cution of th e 
multithreaded software , wherein the partial procedure summary comprises at least one 
state pair, wherein the at least one state pair models an initial state and a resulting state of 
an atomically modelable action execution for the procedure ; and 
the reachability analysis consulting the partial procedure summary to continue the 
reachability analysis , and wherein the partial procedure summary of the procedure of 
multithreaded software is embodied on a second computer readable medium . 



2. 



(Cancelled) 
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3 . (Currently Amended) The computer program product of claim 1 , the method 
further comprising: 

modeling execution of the software via such that the state pair that comprises the partial 
procedure summary is executed rather than the atomically modelable actions . 

4. (Currently Amended) The computer program product of claim 1 , the method 
further comprising: 

during modeling, comparing an indicated state invariant with a modeled state; and 
responsive to determining the modeled state fails the indicated state invariant, wherein 
determining the modeled state fails the indicated state invariant comprises determining that a 
condition is fals e for at l e ast on e execution path, indicating that a programming flaw is present in 
the software ; wherein determining the modeled state fails the indicated state invariant comprises 
determining that a condition is false for at least one execution path . 

5. (Currently Amended) The computer program product of claim 1 , wherein the at 
least one state pair comprises an initial state and a resulting state, wherein the resulting state 
comprises at least one of a plurality of possible states of the multithreaded software after 
execution of the modeled procedure, the method further comprising: 

storing an initial program counter location within the modeled procedure for the initial 

state; 

storing a resulting program counter location within the modeled procedure for the 
resulting state; and 
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associating the initial program counter location within the modeled procedure and the 
resulting program counter location within the modeled procedure with the partial procedure 
summary. 

6. (Currently Amended) The computer program product of claim 1 , the method 
further comprising: 

performing a reachability analysis of the software; and 

wherein the reachability analysis consulting a procedure summary comprising the partial 
procedure summary when the procedure is encountered during the reachability analysis, wherein 
the consulting further comprises determining possible execution paths within the procedure and 
using the procedure summary to explore possible states. 

7. (Previously Presented) The computer program product of claim 1 wherein the 
identifying comprises identifying a transaction boundary within the actions. 

8. (Previously Presented) The computer program product of claim 1 wherein the 
identifying comprises identifying at least one of the plurality of actions as movable later in time 
with respect to actions executed by other threads without affecting a resulting end state. 

9. (Previously Presented) The computer program product of claim 1 wherein the 
identifying comprises identifying a sequence of actions having zero or more right movers 
followed by an atomic action followed by zero or more left movers. 
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10. (Previously Presented) The computer program product of claim 1 wherein the 
plurality of actions atomically modelable with respect to multithreaded execution of the software 
is a subset of the plurality of actions of the procedure, the subset comprising less than all of the 
plurality of actions of the procedure. 

1 1 . (Currently Amended) A computer program product embodied on a first 
computer-readable medium and comprising code that, when executed, causes a computer to 
perform a method of modeling multithreaded software, the method comprising: 

performing a reachability analysis of the multithreaded software; 
during the reachability analysis, reaching a procedure; 

analyzing actions of the multithreaded software within the procedure such that actions 
that can be executable atomically arc determined , wherein the analyzing comprises ch e cking th e 
mod e l e d multithr e ad e d softwar e for programming flaws ; and 

based on the analyzing, generating a plurality of procedure summaries for the 
multithreaded software, the plurality of procedure summaries comprising respective start and end 
actions for the determined actions executable atomically wherein the plurality of procedure 



during the reachability analysis, again reaching the procedure and reusing the plurality of 
procedure summaries to determine actions executable atomically; 

wherein the procedure summaries comprises a plurality of modeled states of the 
multithreaded software for multithreaded execution of the multithreaded software. 



for the multithreaded software is embodied 



second computer readable medium ; 



and 
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12. (Previously Presented) The computer program product of claim 1 1 wherein at 
least one of the procedure summaries comprises at least two or more partial procedure 
summaries summarizing a procedure. 

13. (Previously Presented) The computer program product of claim 1 1 wherein at 
least one of the procedure summaries comprises at least one partial procedure summary for a 
procedure, wherein the partial procedure summary summarizes less than all of the procedure. 

14. (Previously Presented) The computer program product of claim 1 1 wherein the 
analyzing comprises: 

identifying a series of transactions within the multithreaded software; and 
modeling the transactions via partial procedure summaries. 

15. (Currently Amended) A computer program product embodied on a first 
computer readable medium and comprising code that, when executed, causes a computer^ 
implemented to implement a system for modeling multithreaded software, the system 
comprising: 

a model checker operable to analyze a model of the multithreaded software via checking 
the model of the multithreaded software for programming flaws, the model checker comprising: 
the model of the multithreaded software, 
wherein the model comprises! 

a plurality of procedure summaries modeling states of the multithreaded 
software during multithreaded execution of the multithreaded software, the 
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procedure summaries comprising the start and end states of sets of actions 



atomically modelable with respect to multithreaded execution of the software; and 



a reachability analyzer operable to employ the procedure summaries 



instead of the sets of actions to generate modeled states of the software 



/herein the model of the multithreaded software is embodied 



second 



computer readable medium . 

16. (Currently Amended) The compute r-implemented system program product of 
claim 15 wherein at least one of the procedure summaries comprises a procedure summary 
summarizing actions deemed to have occurred one after another without interruption. 

17. (Canceled) 

18. (Currently Amended) The computer -implemented system program product of 
claim -17- 16 wherein the system is operable to detect programming flaws via comparing an 
indicated state invariant with the modeled states. 



19. (Cancelled) 



20. (Cancelled) 



Page 7 of 15 



GL:kaa 03/13/08 836747 306109.01 Attorney Reference Number 3382-66774-01 

PATENT Application Number 1 0/742,695 

2 1 . (Previously Presented) The computer program product of claim 1 , wherein the at 
least one state pair comprises an initial state of the procedure and at least one of a plurality of 
possible states of the multithreaded software after execution of the modeled procedure. 

22. (Canceled) 

23. (New) The computer program product of claim 1 , wherein the resulting state is 
prior to the initial state. 

24. (New) The computer program product of claim 1 , wherein the partial procedure 
summary of the procedure of multithreaded software is embodied on a second computer readable 
medium. 
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